Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget, CVE-2025-24782

CVE, Research URL: CVE-2025-24782
Home page URL: Security reports for Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget
Application: Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget
Published on: Jan 27, 2025
Research Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpWax Post Grid, Slider & Carousel Ultimate allows PHP Local File Inclusion. This issue affects Post Grid, Slider & Carousel Ultimate: from n/a through 1.6.10.
Affected versions: Min -, max 1.7.
Status: vulnerable

Post Grid, Slider &amp; Carousel Ultimate &#8211; with Shortcode, Gutenberg Block &amp; Elementor Widget, CVE-2025-24782